Currently, the Invoice Liquidity Network (ILN) is in experimental/testnet phase. There are no formally supported "secure" versions for mainnet use yet.
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
If you discover a potential vulnerability in the ILN smart contracts, SDK, or indexer, please do not disclose it publicly.
Please report any security issues to [email protected] (or open a confidential GitHub Security Advisory in the repository). We aim to acknowledge receipt of vulnerability reports within 48 hours and provide a timeline for resolution.
The ILN Indexer is designed to be read-only from the network. It strictly polls the Stellar/Soroban blockchain for state changes and persists them locally.
By design, the indexer does not expose any authenticated or unauthenticated write/state-change API routes (POST, PUT, DELETE). All state changes must occur on-chain via the Soroban smart contract. Therefore, API keys or JWTs are not required for the indexer API.